Quarantine Completed (Endpoint Security)

Prev Next
CEF:0|trellix|hx|9.9.0|Trellix Quarantine Completed|Trellix Quarantine Completed|0|rt=Feb 05 2019 17:00:36 UTC
dvchost=trellix-01cb28 categoryDeviceGroup=/IDS/Application/Service categoryDeviceType=Forensic Investigation
categoryObject=/Host cs1Label=Host Agent Cert Hash cs1=HawW2jJc9O6bDMZDqxo30s dst=10.61.155.119
dmac=00-50-56-01-cb-23 dhost=WIN2feff6846b7d dntdom=WORKGROUP deviceCustomDate1Label=Agent Last Audit
deviceCustomDate1=Feb 05 2019 16:55:51 UTC cs2Label=Trellix Agent Version cs2=29.7.0 cs5Label=Correlation ID
cs5=fc9fbe48-3c95-4adb-9ead-e7c72362f4ba cs6Label=SHA1 cs6=2a85b25f583127a3903bbcd1c7187bcdb58b5c5b
externalId=undefined start=Feb 05 2019 17:00:35 UTC categoryOutcome=/Success categorySignificance=/Informational
categoryBehavior=/Access/Start act=Quarantine WIN2feff6846b7d QUARANTINED msg=Host WIN2feff6846b7d quarantine
action categoryTupleDescription=Quarantine task successfully completed, file deleted. filePath=C:\\tmp\
\chrome.exe fileHash=06f391ea3f127ffc3bba3d56f374077f fsize=224768 cs3Label=Quarantine action cs3=<add|delete|
restore> cs4Label=Quarantine ID cs4=56b5e991-93b3-4dff-a9f6-bbb657da6464